CVE-2026-25085 - Vulnerability Analysis

Overview

Copeland XWEB Pro <= 1.12.1 contains an authentication bypass caused by unexpected return value processing in the authentication routine, letting attackers bypass authentication, exploit requires crafted authentication attempts.

Severity & Score

Impact

Attackers can bypass authentication, gaining unauthorized access to the system.

Mitigation

Update to the latest version beyond 1.12.1.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json
• https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 27, 2026

🟠 CVE-2026-25085 - High (8.6) A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25085/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner